$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f82beb5d-baa7-4882-8c14-474b6bf2d762.cer File: f82beb5d-baa7-4882-8c14-474b6bf2d762.cer (raw, json) Hash identifier: oMVPNsqdSeJiO8kFvEHUpHCPNOI34wi6Me/Yit8L9rU= Subject key identifier: FE:C8:45:BC:FE:8C:F3:7D:ED:66:26:59:88:C4:82:B5:84:1D:F1:7A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858473788FEEF94842C296EE57440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f82beb5d-baa7-4882-8c14-474b6bf2d762/f82beb5d-baa7-4882-8c14-474b6bf2d762.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f82beb5d-baa7-4882-8c14-474b6bf2d762/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Sep 2024 00:45:26 +0000 Certificate not after: Sat 19 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 396148 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:37:88:fe:ef:94:84:2c:29:6e:e5:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 15 00:45:26 2024 GMT Not After : Dec 19 01:45:26 2026 GMT Subject: CN=f82beb5d-baa7-4882-8c14-474b6bf2d762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4a:0f:25:07:32:36:c3:ef:f2:a5:25:05:02: 7f:65:b6:78:93:37:ed:3e:6c:fe:ca:a9:01:12:85: a7:11:7b:38:19:bb:65:74:87:7d:76:19:ce:e4:e5: a4:1f:b6:62:09:09:e0:fe:36:8a:4d:db:8a:57:86: c0:37:61:2e:f9:50:72:2c:af:b1:97:92:38:22:6b: 33:af:c0:4b:84:b9:a8:36:37:34:4b:f3:ea:ff:1b: f1:d7:d6:5d:f7:f1:6e:a2:bb:0e:0a:57:b9:9f:d1: fe:3e:91:90:99:5d:73:59:13:74:1f:1a:ce:64:72: 01:5a:94:f0:c0:19:8c:20:26:c5:1b:c6:be:95:66: 19:5d:92:a5:f9:77:68:96:8f:b1:d4:89:d1:50:0d: 41:1b:86:50:34:d1:4d:2b:68:50:be:01:01:e3:d4: 98:70:5f:75:58:47:dc:f0:b9:55:8b:58:74:ac:1b: 2b:f3:83:a1:63:96:d0:6d:bd:c0:58:f1:de:d2:33: 20:49:46:3d:2b:21:94:9f:15:9b:5e:4b:0d:0b:0c: 45:eb:bf:16:18:10:73:f2:ab:ac:75:49:db:4c:d3: a0:17:5f:2b:ce:da:6e:29:00:7b:b8:57:52:bc:a0: a0:43:56:51:d8:48:4c:32:5d:44:3a:6b:84:a2:5a: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:45:BC:FE:8C:F3:7D:ED:66:26:59:88:C4:82:B5:84:1D:F1:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f82beb5d-baa7-4882-8c14-474b6bf2d762/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f82beb5d-baa7-4882-8c14-474b6bf2d762/f82beb5d-baa7-4882-8c14-474b6bf2d762.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396148 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:40:5c:e6:55:da:4c:ed:49:f0:79:6f:3b:19:51:2c:bb:3a: 8d:ea:55:19:f0:81:15:a9:ad:be:78:09:ce:e1:14:60:f8:06: 7a:53:7f:c3:d8:e2:56:8b:2f:59:4d:34:b5:05:5a:69:80:6b: 9e:5d:af:24:4d:96:81:da:45:96:38:9f:29:76:7c:63:ac:d0: c8:49:9a:bf:1c:89:99:b8:57:6b:51:86:75:e9:80:6d:64:99: b5:c8:a8:d8:b5:35:eb:1c:af:f3:a9:7c:70:3c:35:fb:17:30: 21:00:89:5a:cc:84:73:3e:52:9c:b8:d4:ae:ac:55:6a:ab:8e: 71:a7:5c:1a:8f:f3:58:fc:0a:62:2a:a1:c2:35:c3:dc:f7:02: 37:30:86:26:e8:6c:ae:7b:b6:62:b4:ca:e6:36:e7:4e:d9:af: a5:6a:ac:bf:fa:b1:41:72:92:01:7d:46:b2:48:33:69:11:b6: b1:6c:52:92:fe:84:e3:ae:6f:13:18:51:b8:b2:87:5e:ad:f4: f7:20:40:40:ae:9e:cf:cd:9b:3a:02:73:73:3a:1b:60:d7:d5: 78:16:53:7c:83:0a:32:b2:b8:b4:c4:73:14:89:66:77:02:c4: 38:69:49:38:66:69:25:87:82:cd:a6:a2:95:76:c3:7d:0a:61: 69:a4:cb:fb -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEc3iP7vlIQsKW7ldEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxNTAwNDUyNloXDTI2MTIxOTAxNDUyNlowLzEtMCsGA1UEAxMk ZjgyYmViNWQtYmFhNy00ODgyLThjMTQtNDc0YjZiZjJkNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkoPJQcyNsPv8qUlBQJ/ZbZ4kzftPmz+yqkB EoWnEXs4GbtldId9dhnO5OWkH7ZiCQng/jaKTduKV4bAN2Eu+VByLK+xl5I4Imsz r8BLhLmoNjc0S/Pq/xvx19Zd9/FuorsOCle5n9H+PpGQmV1zWRN0HxrOZHIBWpTw wBmMICbFG8a+lWYZXZKl+Xdolo+x1InRUA1BG4ZQNNFNK2hQvgEB49SYcF91WEfc 8LlVi1h0rBsr84OhY5bQbb3AWPHe0jMgSUY9KyGUnxWbXksNCwxF678WGBBz8qus dUnbTNOgF18rztpuKQB7uFdSvKCgQ1ZR2EhMMl1EOmuEolqqYwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFP7IRbz+jPN97WYmWYjEgrWEHfF6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m ODJiZWI1ZC1iYWE3LTQ4ODItOGMxNC00NzRiNmJmMmQ3NjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y4MmJlYjVkLWJhYTctNDg4Mi04 YzE0LTQ3NGI2YmYyZDc2Mi9mODJiZWI1ZC1iYWE3LTQ4ODItOGMxNC00NzRiNmJm MmQ3NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgt0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADNAXOZV2kztSfB5bzsZUSy7Oo3q VRnwgRWprb54Cc7hFGD4BnpTf8PY4laLL1lNNLUFWmmAa55dryRNloHaRZY4nyl2 fGOs0MhJmr8ciZm4V2tRhnXpgG1kmbXIqNi1Nescr/OpfHA8NfsXMCEAiVrMhHM+ Upy41K6sVWqrjnGnXBqP81j8CmIqocI1w9z3AjcwhibobK57tmK0yuY2507Zr6Vq rL/6sUFykgF9RrJIM2kRtrFsUpL+hOOubxMYUbiyh16t9PcgQECuns/NmzoCc3M6 G2DX1XgWU3yDCjKyuLTEcxSJZncCxDhpSThmaSWHgs2mopV2w30KYWmky/s= -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:22 2024 by rpki-client on console-ams.rpki-client.org